phpwiki-talk

[Phpwiki-talk] phpwiki and RHes3/FC3

[Scott T. <sc...@dc...>]

Hello,

I just downloaded v1.2.4 and tryed to run it on two different servers. 
The first was RedHat Enterprize Server 3, with no DB stuff except gdbm,
all I got was a blank stare, no error messages or anything (out-of-the-box
install).

Then I tried with flat file methode, and the page came up saying it
created the files, and I checked, the files were where they said, with
apache perms.  However, when I click a link, the pages don't come up.

I set the admin username and password, tried the admin.php URL and got the
login dialogue box, entered the same username and password and nothing
happens, just get a blank login dialogue again.

Tried it all again on a Fedora Core 3, test boxen, and get the same
results, except this one doesn't even have gdbm so I did get an error
message about missing db file, as expected.

Is it just RH or I'm I missing something.  I followed all the
README/INSTALL files, pretty simple there.

I'm not big on PHP, so I haven't messed with much other then the config
and admin files.

Cheers.

--
Scott

Re: [Phpwiki-talk] phpwiki and RHes3/FC3

[Reini U. <ru...@x-...>]

register_globals on

Scott Taylor schrieb:
> Hello,
> 
> I just downloaded v1.2.4 and tryed to run it on two different servers. 
> The first was RedHat Enterprize Server 3, with no DB stuff except gdbm,
> all I got was a blank stare, no error messages or anything (out-of-the-box
> install).
> 
> Then I tried with flat file methode, and the page came up saying it
> created the files, and I checked, the files were where they said, with
> apache perms.  However, when I click a link, the pages don't come up.
> 
> I set the admin username and password, tried the admin.php URL and got the
> login dialogue box, entered the same username and password and nothing
> happens, just get a blank login dialogue again.
> 
> Tried it all again on a Fedora Core 3, test boxen, and get the same
> results, except this one doesn't even have gdbm so I did get an error
> message about missing db file, as expected.
> 
> Is it just RH or I'm I missing something.  I followed all the
> README/INSTALL files, pretty simple there.
> 
> I'm not big on PHP, so I haven't messed with much other then the config
> and admin files.


-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] phpwiki and RHes3/FC3

[Scott T. <sc...@dc...>]

Reini Urban said:
> register_globals on

What does this mean?  I don't see any variables or anything close to that
name anywhere in the phpwiki-1.2.4 directory and as I said earlier, I
don't grok PHP, much.

Thanks for your reply.

--
Scott

RE: [Phpwiki-talk] phpwiki and RHes3/FC3

[Charles C. <ch...@ru...>]

Scott Taylor wrote:
> Reini Urban said:
> > register_globals on
> 
> What does this mean?  I don't see any variables or anything
> close to that name anywhere in the phpwiki-1.2.4 directory
> and as I said earlier, I don't grok PHP, much.

Google is your friend... Please hunt out the detail for yourself now you
have been pointed in the general direction.  IMO, Reini has a lot of other
things that he considers critical to do right now.

Regards,
Charles

RE: [Phpwiki-talk] phpwiki and RHes3/FC3

[Scott T. <sc...@dc...>]

Charles Corrigan said:
> Scott Taylor wrote:
>> Reini Urban said:
>> > register_globals on
>>
>> What does this mean?  I don't see any variables or anything
>> close to that name anywhere in the phpwiki-1.2.4 directory
>> and as I said earlier, I don't grok PHP, much.
>
> Google is your friend... Please hunt out the detail for yourself now you
> have been pointed in the general direction.  IMO, Reini has a lot of other
> things that he considers critical to do right now.

Good point.

K, I turn register_globals on in the /etc/php.ini file, and restarted Apache.

A lot of stuff I've been reading, this morning, about this
register_globals setting says it is not a secure way to write PHP pages. 
Is that true for this project?

--
Scott

Re: [Phpwiki-talk] phpwiki and RHes3/FC3

[Reini U. <ru...@x-...>]

Scott Taylor schrieb:
> Charles Corrigan said:
> 
>>Scott Taylor wrote:
>>
>>>Reini Urban said:
>>>
>>>>register_globals on
>>>
>>>What does this mean?  I don't see any variables or anything
>>>close to that name anywhere in the phpwiki-1.2.4 directory
>>>and as I said earlier, I don't grok PHP, much.
>>
>>Google is your friend... Please hunt out the detail for yourself now you
>>have been pointed in the general direction.  IMO, Reini has a lot of other
>>things that he considers critical to do right now.
> 
> 
> Good point.
> 
> K, I turn register_globals on in the /etc/php.ini file, and restarted Apache.
> 
> A lot of stuff I've been reading, this morning, about this
> register_globals setting says it is not a secure way to write PHP pages. 
> Is that true for this project?

Yes. Entirely insecure and very easy to abuse. Just a simple small wiki.

We don't do any development anymore on the 1.2.x branch.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/

Re: [Phpwiki-talk] phpwiki and RHes3/FC3

[Reini U. <ru...@x-...>]

Scott Taylor schrieb:
> Reini Urban said:
> 
>>register_globals on
> 
> 
> What does this mean?  I don't see any variables or anything close to that
> name anywhere in the phpwiki-1.2.4 directory and as I said earlier, I
> don't grok PHP, much.

that's a required php setting for the old phpwiki-1.2.x.

e.g.:
.htaccess
php_admin_value register_globals 1

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/